Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa
File:                     3a773969-54d9-3bb6-a5f1-c7d428400972.roa (raw, json)
Hash identifier:          PhI1t8N8CGcu/Wk3zHiuUjfjjYTKdDq6FmQrQpSq6eM=
Subject key identifier:   3B:8B:B3:4E:3F:AC:3B:A2:A7:38:18:F5:B7:15:99:9B:84:30:1D:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAAD3A2C8999BABA2397C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     36631
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:d3:a2:c8:99:9b:ab:a2:39:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=32fbb75e-c901-47c2-a632-b3d0a611ec1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:90:5c:5e:4f:f3:1b:d7:a7:d2:0e:4f:38:
                    da:ec:e8:c0:c2:68:6e:7a:ee:5a:19:ec:f2:16:81:
                    0b:57:f4:ba:fe:3e:49:f5:da:93:96:77:18:61:bc:
                    b8:5d:e9:11:48:cc:67:73:71:59:b9:50:03:6c:c7:
                    20:72:be:ea:f8:43:84:ec:95:51:93:b3:5b:41:df:
                    fa:d0:d4:34:7e:19:64:08:f9:72:5d:44:aa:2d:a0:
                    16:fe:e6:2b:ab:e4:6a:d4:0a:f3:37:fa:d9:ec:43:
                    1f:4d:a6:14:93:6b:6b:5b:fd:30:72:2c:67:23:5f:
                    c5:02:5d:0f:fc:b4:86:41:de:a4:58:24:f0:e7:c8:
                    3b:1c:01:15:1f:fd:e4:a1:f3:36:b9:ab:06:8f:17:
                    5e:6e:80:c2:d4:71:33:4d:4f:75:3d:4f:47:1c:17:
                    da:d3:c8:99:a8:68:66:3d:7e:01:d2:c3:85:f3:c6:
                    8e:94:4d:5c:4c:7a:e4:6e:4e:72:bf:95:78:dc:68:
                    bb:04:83:23:00:e2:53:f3:88:24:9f:71:e2:b5:33:
                    6b:3a:2f:73:8c:d5:5e:fe:2b:90:b7:f6:49:c2:55:
                    2c:aa:67:0e:42:41:8c:f7:cc:bb:47:be:62:14:63:
                    41:7e:e9:c9:37:7e:e0:f5:d8:f6:06:cd:f2:9d:54:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8B:B3:4E:3F:AC:3B:A2:A7:38:18:F5:B7:15:99:9B:84:30:1D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a773969-54d9-3bb6-a5f1-c7d428400972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ad:4e:d0:2a:8c:84:06:34:3d:68:18:cb:0c:5d:47:9e:83:
         f3:c3:97:e4:be:fc:88:4e:d4:2e:ed:bd:9c:1f:20:5d:94:32:
         b8:1a:d4:45:e8:ea:7c:07:47:87:44:82:05:73:bd:13:cc:d2:
         85:78:ee:5e:08:68:b9:08:c0:dc:3b:21:6d:0b:90:15:ec:b1:
         27:3c:7a:15:19:7f:cc:fb:b5:05:ce:02:c5:ec:22:84:d9:1c:
         3d:66:9a:0e:73:f4:b3:04:df:9e:c1:54:dd:44:2f:23:45:c1:
         85:93:1e:33:5a:f3:0c:6d:0b:49:a0:f8:5e:da:50:3c:e7:92:
         2b:01:92:72:f9:03:84:d0:3e:10:89:c7:0b:8a:07:61:d7:51:
         90:38:15:48:73:e8:96:70:23:20:93:04:84:f4:fe:48:b3:e7:
         79:e3:d3:54:0f:f7:f7:9f:ce:f4:5c:50:97:bb:46:e9:8a:c8:
         29:8e:5f:8a:b1:43:b7:90:40:2c:d5:04:42:3f:46:4c:4a:af:
         a0:cc:03:4b:48:2f:31:df:44:a5:a3:c6:15:06:9d:e6:f1:f3:
         5b:b7:4a:dd:fa:9c:14:2e:96:ea:eb:f0:5d:7a:94:95:6e:17:
         6d:86:ba:ee:c3:8d:b2:26:d7:aa:0c:49:12:e9:04:71:a5:2b:
         27:1f:e4:4a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtOiyJmbq6I5fAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
MzJmYmI3NWUtYzkwMS00N2MyLWE2MzItYjNkMGE2MTFlYzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDuQXF5P8xvXp9IOTzja7OjAwmhueu5aGezy
FoELV/S6/j5J9dqTlncYYby4XekRSMxnc3FZuVADbMcgcr7q+EOE7JVRk7NbQd/6
0NQ0fhlkCPlyXUSqLaAW/uYrq+Rq1ArzN/rZ7EMfTaYUk2trW/0wcixnI1/FAl0P
/LSGQd6kWCTw58g7HAEVH/3kofM2uasGjxdeboDC1HEzTU91PU9HHBfa08iZqGhm
PX4B0sOF88aOlE1cTHrkbk5yv5V43Gi7BIMjAOJT84gkn3HitTNrOi9zjNVe/iuQ
t/ZJwlUsqmcOQkGM98y7R75iFGNBfunJN37g9dj2Bs3ynVTYGQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDuLs04/rDuipzgY9bcVmZuEMB0PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E3NzM5NjktNTRkOS0z
YmI2LWE1ZjEtYzdkNDI4NDAwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCmrU7QKoyEBjQ9aBjLDF1HnoPzw5fkvvyITtQu
7b2cHyBdlDK4GtRF6Op8B0eHRIIFc70TzNKFeO5eCGi5CMDcOyFtC5AV7LEnPHoV
GX/M+7UFzgLF7CKE2Rw9ZpoOc/SzBN+ewVTdRC8jRcGFkx4zWvMMbQtJoPhe2lA8
55IrAZJy+QOE0D4QiccLigdh11GQOBVIc+iWcCMgkwSE9P5Is+d549NUD/f3n870
XFCXu0bpisgpjl+KsUO3kEAs1QRCP0ZMSq+gzANLSC8x30Slo8YVBp3m8fNbt0rd
+pwULpbq6/BdepSVbhdthrruw42yJteqDEkS6QRxpSsnH+RK
-----END CERTIFICATE-----